docs: def sign_nonce(key, nonce):
      ''' sign the server nonce from the WWW-Authenticate header with an authKey'''
      # HMAC.new(key, msg='', digestmod=None)
      return Cryptodome.Hash.HMAC.new(key, nonce, digestmod=Cryptodome.Hash.SHA256).digest()